UK GDPR: The United Kingdom General Data Protection Regulation sets standards for data protection and privacy, including requirements for handling personal data, data subject rights, and data security measures.
Data Protection Act 2018: The UK's implementation of data protection laws, working alongside UK GDPR to regulate the processing of personal data and specify additional data protection requirements.
Privacy and Electronic Communications Regulations (PECR): Specific rules for electronic communications, including regulations on electronic marketing, cookies, and communication services privacy.
Network and Information Systems Regulations 2018: Legislation aimed at improving cybersecurity for critical national infrastructure and essential services providers.
Public Contracts Regulations 2015: Governs public sector procurement procedures, ensuring fair competition and transparency in public contract awards.
TUPE Regulations 2006: Protects employees' rights when business ownership changes or service provision transfers between providers.
Unfair Contract Terms Act 1977: Regulates contracts by restricting how far civil liability for breach of contract, negligence or other breaches of duty can be avoided.
Copyright, Designs and Patents Act 1988: Primary legislation protecting intellectual property rights, including software, documentation, and other IT-related assets.
Financial Services and Markets Act 2000: Regulates financial services providers and markets, including IT services provided to financial institutions.
Electronic Commerce Regulations 2002: Implements EU E-Commerce Directive, covering electronic contracts and online service provider obligations.
Competition Act 1998: Prohibits anti-competitive behavior and abuse of dominant market position in business arrangements.
ISO 27001: International standard for information security management systems, often required in IT service contracts.
Consumer Rights Act 2015: Protects consumer rights and regulates business-to-consumer contracts, including digital content and services.
Employment Rights Act 1996: Establishes basic employment rights that must be considered when staff are involved in IT service provision.
